feat: K8s 部署清单、Token 接入加固与日志/设置页优化

- kubernetes/: 30Gi PVC、单副本 Recreate、Secret/Service/NodePort/Ingress 清单与部署文档
- 数据安全: kubeconfig/token 统一加密存储，启动迁移历史明文，DB 0600
- Token 接入: 命名空间级最小权限提示、长期 Token、自签证书 TLS 兼容
- 部署: 命名空间级 Token 下跳过 Namespace patch/枚举，节点信息容错
- 日志页: namespace → app → pod 选择顺序与作用域收窄
- 设置页: 拆分为通用/告警/LDAP/镜像源四个 tab
- 弹框: 统一 max-h 滚动与长命令换行，修复内容溢出

frontend/src/api/settings/index.ts

@@ -1,9 +1,15 @@
 // 设置域 API — 镜像源等平台级配置
 import { http } from '../http'
 
+export interface ComponentImage {
+  repository: string
+  tag: string
+}
+
 export interface ImageRegistryConfig {
   mode: 'overseas' | 'cn' | 'custom'
   customHost: string
+  images: Record<string, ComponentImage>
   sampleLoki: string
   sampleGrafana: string
   samplePromtail: string
@@ -12,6 +18,6 @@ export interface ImageRegistryConfig {
 
 export const settingsApi = {
   getImageRegistry: () => http.get<ImageRegistryConfig>('/settings/image-registry'),
-  saveImageRegistry: (data: { mode: string; customHost?: string }) =>
+  saveImageRegistry: (data: { mode: string; customHost?: string; images?: Record<string, ComponentImage> }) =>
     http.put<ImageRegistryConfig>('/settings/image-registry', data),
 }

frontend/src/api/storage/index.ts

@@ -4,7 +4,7 @@ import type { PageData, StorageConfig } from '@/types';
 
 export interface StorageCreateInput {
   name: string;
-  storageType: 's3' | 'oss' | 'minio' | 'rustfs';
+  storageType: 's3' | 'oss' | 'cos' | 'obs' | 'minio' | 'rustfs';
   endpoint?: string;
   bucket: string;
   region?: string;